As an additional discovery, we also found that stable diffusion is able to fully replicate some paintings knowing only the name of the painting, which we show in fig:paint, which also proves the feasibility of membership inference attacks [1]}, [2]}, [3]}, [4]} and model stealing attacks [5]}, [6]} on the diffusion model.
